summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorterry%netscape.com <>1999-03-23 08:48:39 +0100
committerterry%netscape.com <>1999-03-23 08:48:39 +0100
commit57f0b7a2c7ed40c7eb2029bf1091c3f262b1e23f (patch)
tree733e6a2a8ccc45f615ee7160dd1041968ba089ff
parent45a305f91770e1ae8a63070fa35d6e74f92f4004 (diff)
downloadbugzilla-57f0b7a2c7ed40c7eb2029bf1091c3f262b1e23f.tar.gz
bugzilla-57f0b7a2c7ed40c7eb2029bf1091c3f262b1e23f.tar.xz
Patch by Dru Nelson <dnelson@redwoodsoft.com> -- quote the
logincookie, just in case some silly user mucked with their cookie file.
-rw-r--r--CGI.pl2
1 files changed, 1 insertions, 1 deletions
diff --git a/CGI.pl b/CGI.pl
index 3f3ed82b4..74d383646 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -244,7 +244,7 @@ sub quietly_check_login() {
"and logincookies.hostname = " .
SqlQuote($ENV{"REMOTE_HOST"}) .
" from profiles,logincookies where logincookies.cookie = " .
- $::COOKIE{"Bugzilla_logincookie"} .
+ SqlQuote($::COOKIE{"Bugzilla_logincookie"}) .
" and profiles.userid = logincookies.userid");
my @row;
if (@row = FetchSQLData()) {